Skip to content

Instantly share code, notes, and snippets.

View theofpa's full-sized avatar

Theofilos Papapanagiotou theofpa

View GitHub Profile
@theofpa
theofpa / istio-ingress-cognito.yaml
Created June 14, 2021 08:32
istio-ingress-cognito.yaml
apiVersion: extensions/v1beta1
kind: Ingress
metadata:
annotations:
alb.ingress.kubernetes.io/auth-idp-cognito: '{"UserPoolArn":"arn:aws:cognito-idp:eu-west-1:123456789:userpool/eu-west-1_tYouaCRMy","UserPoolClientId":"5g4t4a36yrt237rlq3a","UserPoolDomain":"auth.workshops.example.com"}'
alb.ingress.kubernetes.io/auth-type: cognito
alb.ingress.kubernetes.io/certificate-arn: arn:aws:acm:eu-west-1:123456789:certificate/def76456789-88f0-43d1-bdd7-c3e8bc537a17
alb.ingress.kubernetes.io/listen-ports: '[{"HTTPS":443}]'
alb.ingress.kubernetes.io/scheme: internet-facing
kubernetes.io/ingress.class: alb
@theofpa
theofpa / istio-ingress-api.yaml
Last active August 8, 2023 11:18
An Istio ingress resource that uses ALB and header based auth, handy to serve Kubeflow traffic to non-humans
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
annotations:
alb.ingress.kubernetes.io/listen-ports: '[{"HTTPS":443}]'
alb.ingress.kubernetes.io/load-balancer-attributes: idle_timeout.timeout_seconds=180
alb.ingress.kubernetes.io/scheme: internet-facing
alb.ingress.kubernetes.io/certificate-arn: 'arn:aws:acm:eu-west-1:1234123xxx:certificate/66e23eea-39bc-45fa-67b7-xxx'
alb.ingress.kubernetes.io/conditions.istio-ingressgateway: '[{"Field":"http-header","HttpHeaderConfig":{"HttpHeaderName": "x-api-key", "Values":["aRandomStringxxx", "anotherRandomStringxxx"]}}]'
alb.ingress.kubernetes.io/actions.istio-ingressgateway: '{"Type":"forward","ForwardConfig":{"TargetGroups":[{"ServiceName":"istio-ingressgateway","ServicePort":"80","Weight":100}]}}'
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.

Keybase proof

I hereby claim:

  • I am theofpa on github.
  • I am theofpa (https://keybase.io/theofpa) on keybase.
  • I have a public key ASBL1VvyY9SGo0gdjyEyVeUPbViXW61OcN_mGR-wnODEYQo

To claim this, I am signing this object: